HOMETHREATSThanatos Ransomware
MALWARE FAMILY

Thanatos Ransomware

Internal ID: win.thanatos_ransom
1
aliases
Last seen:Mar 17, 2026

Intelligence Profile

Malware family identifying win.thanatos_ransom. Origin and technical characteristics tracked via Malpedia.

Threat Analysis

Thanatos Ransomware is a malware family tracked by threat intelligence researchers and catalogued in the Malpedia dataset. It represents a distinct malicious software lineage with identifiable code characteristics, behaviors, and victimology.

External References

→https://www.bleepingcomputer.com/news/security/thanatos-ransomware-decryptor-released-by-the-cisco-talos-group/
→https://www.bleepingcomputer.com/news/security/thanatos-ransomware-is-first-to-use-bitcoin-cash-messes-up-encryption/
→https://blog.talosintelligence.com/2018/06/ThanatosDecryptor.html

Quick Facts

TypeMalware Family
Aliases1

Also Known As

win.thanatos_ransom

Research Links

MITRE ATT&CK VirusTotal Google (news) Twitter/X search
Data sourced from Malpedia, Ransomware.live, RansomLook, and CTIWATCH OSINT collection. Actor attribution is based on available intelligence and may be incomplete.
← All Threat Actors·Geopolitics Map·Search Thanatos Ransomware
Thanatos Ransomware — Malware Family | Threat Intelligence | CTIWATCH.COM